keychron-keyboards-hardware-design
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to parse metadata from external files, which represents an indirect injection surface.
- Ingestion points: The
parse_step_header.pyscript reads the raw contents of.stpand.stepCAD files from the local file system. - Boundary markers: None identified; the script performs raw regex searches across the file content without delimiters or markers to distinguish data from instructions.
- Capability inventory: The skill includes several Python scripts that perform file system reading and writing (
pathlib,os,csv,json) and utilizes external geometry libraries (cadquery,ezdxf,FreeCAD). - Sanitization: There is no sanitization, validation, or escaping of the extracted metadata strings (e.g.,
description,file_name) before they are displayed or processed by the agent. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions to clone the hardware design repository from Keychron's official GitHub organization. This targets a well-known and established service.
Audit Metadata